Bug 515668

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.1) Gecko/20090717 Fedora/3.5.1-3.fc11 Firefox/3.5.1

I am using a Linksys PCMCIA wireless card, which is model WPC54GS at version 2, on a Fedora 11 system installed on a Thinkpad T42. When I am using the b43 kernel module in conjunction with the b43-openfwwf firmware, I frequently observe the system panic when there is heavy amounts of network activity on the wireless card interface. Empirically, this issue only seems to happen when the card is associated with the residential wireless network broadcast by the Actiontec MI424WR wireless router, and it does not occur when using the Broadcom firmware extracted according to the instructions from http://www.linuxwireless.org/en/users/Drivers/b43#device_firmware. I can most consistently cause a crash by using the speed testing service at http://www.speedtest.net/ to stress test the wireless interface.

Reproducible: Always

Steps to Reproduce:
1. Install b43-openfwwf to get the wireless card operational.
2. Visit http://www.speedtest.net/ for an easy way to stress test the card.
3. Start a speed test. The kernel should panic shortly after the test is begun.
Actual Results:  
The system halts with a kernel panic.

Expected Results:  
The system should not crash.

I captured the resulting kernel panic using netconsole, since the system did not switch to a text console when the panic occurred. The information from lspci -vv regarding the card is:

03:00.0 Network controller: Broadcom Corporation BCM4318 [AirForce One 54g] 802.11g Wireless LAN Controller (rev 02)
	Subsystem: Linksys Device 0049
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64
	Interrupt: pin A routed to IRQ 11
	Region 0: Memory at c4000000 (32-bit, non-prefetchable) [size=8K]
	Kernel driver in use: b43-pci-bridge
	Kernel modules: ssb